MAL-2025-23485 Malicious code in ivr (npm)

The package ivr was found to contain malicious code...

CVE-2011-4258

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted length of an MLTI chunk in an IVR file...

CVE-2010-2998

Array index error in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.0.1 allows remote attackers to execute arbitrary code via malformed sample data in a RealMedia .IVR file, related to a "malformed IVR pointer index" issue...

Truist bank confirms data breach

On Wednesday June 12, 2024, a well-known dark web data broker and cybercriminal acting under the name "Sp1d3r" offered a significant amount of data allegedly stolen from Truist Bank for sale. Truist is a US bank holding company and operates 2,781 branches in 15 states and Washington DC. By assets...

CVE-2022-44758

BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content. An attacker can gain access to information that is not explicitly authorized...

CVE-2022-44757

BigFix Insights for Vulnerability Remediation IVR uses weak cryptography that can lead to credential exposure. An attacker could gain access to sensitive information, modify data in unexpected ways, etc...

Input validation

BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content. An attacker can gain access to information that is not explicitly authorized...

CVE-2022-44757

BigFix Insights for Vulnerability Remediation (IVR) is documented to use weak cryptography, leading to credential exposure. The vulnerability can allow an attacker to access sensitive information and modify data. Several sources (including NVD/CVE and related aggregations) confirm the weak-crypto...

CVE-2022-44758

CVE-2022-44758 affects BigFix Insights/IVR fixlets with improper credential handling in certain fixlet content. An attacker could access information that is not explicitly authorized. The primary sources indicate this is a vulnerability in fixlet credential handling, but there are no public detai...

Malicious code in ivr-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 998726f9d073fda61804b91c9c090376845bd077a3322770715d7c1f37d03449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8056 Malicious code in ivr-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 998726f9d073fda61804b91c9c090376845bd077a3322770715d7c1f37d03449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2017-14054

In libavformat/rmdec.c in FFmpeg 3.3.3, a DoS in ivrreadheader due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted IVR file, which claims a large "len" field in the header but does not contain sufficient backing data, is provided, the first type==4 loop would...

CVE-2022-44756

Insights for Vulnerability Remediation IVR is vulnerable to improper input validation. This may lead to information disclosure. This requires privileged access...

CVE-2022-42454

Insights for Vulnerability Remediation IVR is vulnerable to man-in-the-middle attacks that may lead to information disclosure. This requires privileged network access...

CVE-2022-42454

Insights for Vulnerability Remediation IVR is vulnerable to man-in-the-middle attacks that may lead to information disclosure. This requires privileged network access...

Information disclosure

Insights for Vulnerability Remediation IVR is vulnerable to man-in-the-middle attacks that may lead to information disclosure. This requires privileged network access...

CVE-2022-44756

CVE-2022-44756 affects HCL BigFix Insights for Vulnerability Remediation (IVR). The vulnerability stems from improper input validation in IVR, which could lead to information disclosure and requires privileged access. Reports consistently describe the affected component as IVR and indicate the im...

CVE-2022-42454

The CVE-2022-42454 entry concerns HCL BigFix Insights for Vulnerability Remediation (IVR). The vulnerability is due to improper certificate validation, enabling potential man-in-the-middle attacks and information disclosure with privileged network access. Connected sources confirm MITM risk and a...

NCH IVM Attendant 路径遍历漏洞

NCH IVM Attendant is a complete voicemail, call attendant, and IVR solution for Windows.A security vulnerability in NCH IVM Attendant allows an authenticated attacker to exploit a user's access to a directory via viewfile?file=/... using directory traversal...

Cross site request forgery (csrf)

A vulnerability allows a phreaking attack on HCL legacy IVR systems that do not use VoIP. These IVR systems rely on various frequencies of audio signals; based on the frequency, certain commands and functions are processed. Since these frequencies are accepted within a phone call, an attacker can...